Privacy Policy
Last updated: 2026-05-08 · Version 1.0.0
This Privacy Policy explains how Emotional Reset ("we", "us") processes personal data when you visit this website. It is written to comply with Regulation (EU) 2016/679 (GDPR) and the Italian Personal Data Protection Code.
1. Data controller
[REPLACE: Emotional Reset S.r.l.], registered office at [REPLACE: full street address, Milan, Italy]. Email: privacy@emotionalreset.app. Where applicable, our Data Protection Officer can be contacted at dpo@emotionalreset.app [REPLACE: confirm or remove if no DPO appointed].
2. Categories of personal data we collect
- Form submissions: name, work email, company, segment of interest, and any free-text content you provide.
- Cookie-based identifiers: see our Cookie Policy.
- Technical data: IP address (truncated where possible), device type, browser, operating system, referring URL, pages viewed — collected via analytics tools.
3. Purposes and legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Respond to demo requests | Form submission | Pre-contractual measures — Art. 6(1)(b) GDPR |
| Marketing communications about Emotional Reset | Form submission | Consent — Art. 6(1)(a) GDPR |
| Analytics & product improvement | Cookies, technical data | Consent — Art. 6(1)(a) GDPR |
| Security, fraud prevention, log-keeping | IP address, security logs | Legitimate interest — Art. 6(1)(f) GDPR |
4. Recipients and processors
We share personal data with the following categories of processors, each bound by a Data Processing Agreement:
- Google LLC — Google Analytics 4 and Google Tag Manager.
- HubSpot Inc. — CRM and form intake.
- Hosting provider: [REPLACE: hosting provider name and country].
- Email delivery: [REPLACE: e.g. Resend, SendGrid].
5. International transfers
Google and HubSpot process personal data in the United States. Transfers are governed by the European Commission's Adequacy Decision for the EU-US Data Privacy Framework (10 July 2023) and, where required, by Standard Contractual Clauses adopted under Commission Implementing Decision (EU) 2021/914.
You should be aware that, despite these safeguards, US authorities may seek access to personal data under applicable surveillance laws. We have assessed this transfer risk and consider the safeguards adequate; however, you may exercise your right to object at any time.
6. Retention periods
- Demo / form submissions: 24 months from last interaction.
- Analytics data: 14 months (Google Analytics 4 default).
- Consent records: 24 months.
- Server security logs: 12 months.
7. Your rights
Under GDPR Articles 15–22 you may exercise the following rights, free of charge:
- Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18).
- Data portability (Art. 20).
- Object to processing (Art. 21), including direct marketing.
- Withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7(3)).
- Not to be subject to solely automated decisions producing legal effects (Art. 22). We do not engage in such decision-making.
To exercise any right, contact privacy@emotionalreset.app. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority, www.garanteprivacy.it) or with the supervisory authority of your country of residence.
8. Children
This service is not directed at children under 16. We do not knowingly collect personal data from minors.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated on this page; the updated date and version number above always reflect the most recent revision.
10. Contact
[REPLACE: Emotional Reset S.r.l.] — privacy@emotionalreset.app